From d0fee872643278eb0086660f56a813b96599b82f Mon Sep 17 00:00:00 2001
From: Matthieu Rigal <matthieu.rigal@ts.berlin>
Date: Sat, 4 Feb 2023 11:12:56 +0100
Subject: [PATCH] Create newline to ensure [SAN] section can be parsed

---
 getssl | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/getssl b/getssl
index 2f2d87a..511923e 100755
--- a/getssl
+++ b/getssl
@@ -1156,7 +1156,7 @@ create_csr() { # create a csr using a given key (if it doesn't already exist)
     # create a temporary config file, for portability.
     tmp_conf=$(mktemp 2>/dev/null || mktemp -t getssl) || error_exit "mktemp failed"
     cat "$SSLCONF" > "$tmp_conf"
-    printf "[SAN]\n%s" "$SANLIST" >> "$tmp_conf"
+    printf "\n[SAN]\n%s" "$SANLIST" >> "$tmp_conf"
     # add OCSP Must-Staple to the domain csr
     # if openssl version >= 1.1.0 one can also use "tlsfeature = status_request"
     if [[ "$OCSP_MUST_STAPLE" == "true" ]]; then